public_git
/
oauth2-proxy
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix error

This commit is contained in:
Anderson Valério 2025-06-02 14:40:10 -03:00
parent b5da4ecc31
commit 7a2b1f8c19
No known key found for this signature in database
GPG Key ID: 92D38E56BFF005A0
2 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
oauthproxy.go
View File

@ -815,16 +815,12 @@ func (p *OAuthProxy) backendLogout(rw http.ResponseWriter, req *http.Request, si
p.picsAuditClient.CreateSuccessfulLogoutAuditEntry(session, req.RequestURI, req.Header.Get("edisp-org-id")) p.picsAuditClient.CreateSuccessfulLogoutAuditEntry(session, req.RequestURI, req.Header.Get("edisp-org-id"))
} else { } else {
if providerData.BackendRevokeAccessTokenURL != "" { if providerData.BackendRevokeAccessTokenURL != "" {
resp, err := PicsRevokeAcessToken(providerData.BackendRevokeAccessTokenURL, session.AccessToken, providerData.ClientID, providerData.ClientSecret) err := PicsRevokeAcessToken(providerData.BackendRevokeAccessTokenURL, session.AccessToken, providerData.ClientID, providerData.ClientSecret)
if err != nil { if err != nil {
logger.Errorf("error while calling backend revoke access token: %v", err) logger.Errorf("error while calling backend revoke access token: %v", err)
return } else {
p.picsAuditClient.CreateSuccessfulRevokeAccessTokenAuditEntry(session, req.RequestURI, req.Header.Get("edisp-org-id"))
} }
if resp.StatusCode() != 200 {
logger.Errorf("error while calling backend revoke acess token url, returned error code %v", resp.StatusCode())
}
p.picsAuditClient.CreateSuccessfulRevokeAccessTokenAuditEntry(session, req.RequestURI, req.Header.Get("edisp-org-id"))
} }
if providerData.BackendLogoutURL == "" { if providerData.BackendLogoutURL == "" {

12
pics_oauthproxy.go
View File

@ -35,11 +35,11 @@ func PicsSignOutAllSessions(backendLogoutAllSessionsURL string, introspectClaims
return resp, err return resp, err
} }
func PicsRevokeAcessToken(backendRevokeURL string, accessToken string, clientID string, clientSecret string) (resp requests.Result, err error) { func PicsRevokeAcessToken(backendRevokeURL string, accessToken string, clientID string, clientSecret string) (err error) {
authHeader := "Basic " + base64.StdEncoding.EncodeToString([]byte(clientID+":"+clientSecret)) authHeader := "Basic " + base64.StdEncoding.EncodeToString([]byte(clientID+":"+clientSecret))
body := "token=" + accessToken body := "token=" + accessToken
resp = requests.New(backendRevokeURL). resp := requests.New(backendRevokeURL).
WithMethod("POST"). WithMethod("POST").
SetHeader("Authorization", authHeader). SetHeader("Authorization", authHeader).
SetHeader("api-version", "2"). SetHeader("api-version", "2").
@ -49,10 +49,14 @@ func PicsRevokeAcessToken(backendRevokeURL string, accessToken string, clientID
Do() Do()
if resp.Error() != nil { if resp.Error() != nil {
return nil, fmt.Errorf("error revoking access token: %v", resp.Error()) return fmt.Errorf("error revoking access token: %v", resp.Error())
} }
return resp, nil if resp.StatusCode() != 200 {
return fmt.Errorf("error revoking access token: %v", resp.Error())
}
return nil
} }
func getUserID(introspectClaims string) (string, error) { func getUserID(introspectClaims string) (string, error) {